development
development copied to clipboard
Multitenancy: Supplier can register Customer for different tenant
[Version] 16.1 fix7+ 2017/03/30
[How to reproduce]
- Configure default tenant (D) and one additional tenant (A)
- Create Marketplace Owner and Marketplace in D
- Create Marketplace Owner and Marketplace in A
- Register new customer as Marketplace Owner in D for Marketplace in A
[Expected result] Not possible / Exception because of different tenant
[Observed result] New user is registered
[Comment] There has to be a check added for UI und SOAP if the tenant of the customer, supplier and the marketplace are identical.
Given scenario needs to be covered by SOAP API tests.
What about marketplaces which are not assigned to any tenant? Should they be seen in the drop down list, in this case, or not? Or maybe tenantid of the marketplace owner organization has to be checked?